How vaishnavicm-16/sentinel-ast works
SENTINEL AST is a developer-facing SAST tool with both a browser playground/dashboard and a terminal CLI. The main workflow accepts source code or files, parses them into ASTs, applies security rules, aggregates findings, and presents or exports results. The graph covers the documented rule catalog and SARIF/CI gate capabilities. Some UI-to-engine calls are supported by the SOURCE INDEX rather than complete excerpts; unsampled implementation details are not inferred.
Main entry points: App.tsx Web application · index.ts Terminal CLI · scanner.ts Scan orchestrator · ScannerPlayground.tsx Scanner playground
Components 23
Web experience
- Web application
src/App.tsx - Scanner playground
src/components/ScannerPlayground.tsx - Findings dashboard
src/components/DashboardView.tsx - Security features
src/components/FeaturesSection.tsx - Rules and docs
src/components/DocumentationSection.tsx - Checklist modal
src/components/ChecklistModal.tsx - Product landing
src/components/Hero.tsx - Terminal demo
src/components/TerminalDemo.tsx - Navigation
src/components/Navbar.tsx - Workflow overview
src/components/HowItWorks.tsx - CLI overview
src/components/CliSection.tsx - CI/CD overview
src/components/CicdSection.tsx - Footer
src/components/Footer.tsx
Scan entrypoints
- Terminal CLI
cli/index.ts
Analysis engine
- Scan orchestrator
src/engine/scanner.ts - AST parser and walker
src/engine/parser.ts - Security rules
src/engine/rules/index.ts - Scan data types
src/engine/types.ts - Vulnerable and safe samples
src/engine/sampleCodes.ts
Findings and output
- SARIF exporter
src/engine/sarif.ts - Terminal and file output
cli/index.ts
Other components
- Developer
- Code-scanning platform
Connections 29
- Developer → Web application: uses
- Developer → Terminal CLI: runs scans
README.md - Web application → Navigation: renders
src/App.tsx - Web application → Product landing: renders
src/App.tsx - Web application → Scanner playground: renders
src/App.tsx - Web application → Security features: renders
src/App.tsx - Web application → Findings dashboard: renders
src/App.tsx - Web application → Workflow overview: renders
src/App.tsx - Web application → CLI overview: renders
src/App.tsx - Web application → CI/CD overview: renders
src/App.tsx - Web application → Rules and docs: renders
src/App.tsx - Web application → Checklist modal: renders
src/App.tsx - Web application → Footer: renders
src/App.tsx - Product landing → Terminal demo: renders
src/components/Hero.tsx - Scanner playground → Scan orchestrator: scans code
src/components/ScannerPlayground.tsx - Scanner playground → Vulnerable and safe samples: loads examples
src/components/ScannerPlayground.tsx - Scanner playground → SARIF exporter: exports findings
src/components/ScannerPlayground.tsx - Findings dashboard → Scan orchestrator: scans repository
src/components/DashboardView.tsx - Findings dashboard → Vulnerable and safe samples: uses examples
src/components/DashboardView.tsx - Findings dashboard → SARIF exporter: exports findings
src/components/DashboardView.tsx - Terminal CLI → Scan orchestrator: scans files
cli/index.ts - Terminal CLI → Security rules: lists rules
cli/index.ts - Terminal CLI → SARIF exporter: exports SARIF
cli/index.ts - Terminal CLI → Terminal and file output: prints and saves
cli/index.ts - Scan orchestrator → AST parser and walker: parses source
src/engine/scanner.ts - Scan orchestrator → Security rules: runs checks
src/engine/scanner.ts - Security rules → AST parser and walker: walks AST
src/engine/rules/index.ts - SARIF exporter → Code-scanning platform: feeds code scanning
README.md - Terminal CLI → Code-scanning platform: supports CI gate upload
README.md